Chief Information Security Officer

Job Overview:

• Lead company-wide security strategy, policies, audits and governance.
• Ensure compliance with ISO 27001, SOC 2 Type II, PCI DSS L1, CERT-In Data Localization, RBI & NPCI security guidelines.
• Oversee risk management, VAPT, data protection, key management, incident response, DR/BCP.
• Build and manage security roadmap, vendor audits, cybersecurity budget, internal and external assessments.
• Work with DevOps, backend, compliance, legal and infra teams to enforce secure development lifecycle.
• Manage security awareness, internal training and audit readiness.
• Act as primary security contact for banks, NPCI, auditors, vendors & regulators.
• Own SIEM, SOC operations, access control, logs, encryption standards, security tooling.

Skills & Qualifications:

• 5+ years in cybersecurity / Infosec leadership, preferably in fintech, payments, BFSI or SaaS.
• Proven experience with PCI DSS, ISO 27001, SOC 2, NIST, OWASP, RBI / NPCI guidelines.
• Deep knowledge of network, cloud & application security, IAM, encryption, threat modeling.
• Experience managing VAPT, DR drills, risk registers, incident response, CERT interactions.
• Familiarity with AWS / GCP security, Kubernetes security, secrets management (HSM, Vault, KMS)
• Strong stakeholder communication with CXO, auditors, banks and regulators.
• Security certifications preferred: CISSP, CISM, ISO 27001 Lead Auditor / Implementer, CEH, CRISC.

Preferred:

• Experience securing UPI, Wallet, Payment Switch, Banking API infra.
• Experience with tokenization, key rotation, HSM, data masking, AML / Fraud systems.